Lucene search
+L

2 matches found

Hacker One
Hacker One
•added 2018/07/23 12:48 p.m.•59 views

Chaturbate: Rate limit missing at room login

Hello there, User are able to protect there broadcasting with password, so only password granted visitor can login to broadcast room. I notice that rate limit are missing at the endpoint /roomlogin/user/ which enable me to brute force on password field. I made 1k+ request but still server not blo...

SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/16 12:00 a.m.•3 views

CVE-2005-1618: Undefined Security Weakness

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service disconnect via a room login or a room join request packet with a third : colon and an & ampersand, which causes Messenger to send a corrupted packet to the server, which triggers a...

5CVSS5.9AI score0.03158EPSS
SaveExploits1References1
Rows per page
Query Builder